iPhone 5s puts the spotlight on biometrics

In September, Validity's chief technology officer Sebastien Taveau was cited by Business Insider in a piece that noted Apple had been "filing patents on biometric security since at least 2009." Taveau said that "Apple has been working on it for more than two years and they have extremely competent engineers."

Apple was also said to have worked with Australian component firm Microlatch. The company's managing director and founder Chris Burke was cited as saying Apple had approached the company at least two years ago in an effort to investigate fingerprint technology and users' reactions to it.

While some Android vendors had added fingerprint sensors to their phones, including Motorola and Fujitsu, the feature wasn't being widely used and wasn't working reliably enough for Motorola to continue supporting it.

But now that Apple has popularized the technology on its iOS flagship, Synaptics sees its acquisition of Validity as a way "to strengthen its portfolio of touch-based technologies with the diversification into fingerprint-sensing capabilities."

Synaptics is currently a leading supplier of PC touchpads, including Apple among its customers; it also supplies the chips that power most smartphone touch screens apart from Apple's. The sharp decline in PC growth at the hands of Apple's iPad and other mobile devices that have shifted from a pointer-based interface to multitouch appears to be a contributing factor in the company's efforts to diversify its offerings via Validity.

Apple takes AuthenTec out of reach

AuthenTec had been supplying most of the world's capacitative fingerprint sensors, which have been embedded in Windows notebooks and tablets for many years. However, After Apple acquired the firm for $356 million in July 2012, it stopped selling the sensors to third parties.

Biometric Updatecited reports last year describing those customers as being "in a state of panic" as they tried to find alternative suppliers.

Samsung was particularly affected, as it used AuthenTec sensors in its notebooks and relied on the company's VPN software for its Android phones. Apple subsequently sold AuthenTec's Embedded Security Solutions division to Inside Secure. That left Samsung looking for a replacement fingerprint sensor vendor.

Alternative mobile sensors are not as advanced

Samsung was reported to be working with Validity in an effort to put a fingerprint sensor in its Note 3 phablet over the summer.

The company's efforts to support the sensor were leaked in a report identifying a "FingerprintService.apk" Android app associated with the new device, but the Note 3 was announced without the feature the week before Apple debuted its iPhone 5s with Touch ID, based on the AuthenTec acquisition.

Both Apple and Samsung were said to have run into severe production problems in developing a fingerprint sensor suitable for use on a mobile device, but Apple launched the feature in volume and Samsung hasn't at all. Samsung executives have since backpedaled on their support of fingerprint login, describing it as simply a technology the company is watching to see how it unfolds. "We never officially admitted that Samsung was weighing the fingerprint system" - Samsung

"We never officially admitted that Samsung was weighing the fingerprint system," a Samsung official was cited by the Korean Herald as saying. "We are not yet developing the technology."

Part of Samsung's problem is that there are few suppliers with suitable technology. Korea's Crucialtec was described by that same report as being more than a year behind AuthenTec in its fingerprint scanning technology. That firm currently supplies a sensor for Pantech phones, but uses a swipe-scan system rather than the nearly instantaneous, flat pad sensor Apple is using in its iPhone 5s.

Describing the disadvantages of swipe sensors, Nelly Porter, Microsoft's head of Windows Security toldCITEWorld , "they're not intuitive. You have to swipe your finger, not too fast and not too slow and not over to the left and not over to the right but just in the right place so the sensor can compose the stripe image. That's users having to work for the technology, not having the technology work or them."

Nobody wanted it until Apple delivered it

While there are a variety of companies that build fingerprint sensors, few companies have the expertise that AuthenTec had as the world's leading producer of the sensors and the identity management behind them, and most are inferior swipe scan systems or use simpler optical or thermal sensing.

Developing and selling the advanced technology required for a reliable, fast sensor is expensive; in an SEC filing prior to Apple's acquisition, AuthenTec noted that it had developed new fingerprint technology and had attempted to shop it around to "several leading consumer electronics companies."

However, none of the companies AuthenTec approached expressed an interest in using the technology apart from Apple, which began a conversation with the firm in late 2011. AuthenTec stated that the main reason Apple was the only interested party appears to have been the cost involved.

Fraught with security risks

Incorporating fingerprint authentication is more complicated than simply including a sensor. Apple outlined how its own Touch ID feature was deeply integrated with the Secure Enclave Processor architecture within its new A7 Application Processor, which securely stores print data in a way that is inaccessible from apps, and even from the rest of the system, a protection designed to maintain security even if the operating system were compromised via a vulnerability.

AuthenTec was fully aware of the risks involved with poorly integrated fingerprint solutions. In 2010, the firm had itself acquired UPEK, another significant fingerprint technology vendor. Two years later, UPEK's product to log into Windows laptops was revealed to store users' Windows login passwords insecurely in the Registry, allowing a hacker with physical access to easily retrieve passwords to all accounts that had enabled fingerprint login.

AuthenTec stopped selling the software, but it was installed on a wide range of Windows laptops, including models from Acer, Asus, Compal, Dell, Gateway, Lenovo, Samsung, Sony and Toshiba.

In order to match Apple's Touch ID security, Android vendors like Samsung will also need to overhaul the hardware and software security of their devices. Samsung is already struggling to secure Android with its "Knox" solution (above) for adding secure app sandboxing to a few specific Galaxy models, as well as a third party "LoJack" subscription service designed to work similar to Apple's new Activation Lock in iOS 7.

And as it has always been, the PC industry in general has zero clue how to use current tech and design appropriate software that hides the the from the user.

Then comes Apple (a.k.a. Samsung's R&D Department) to once again show how stupid everyone else is and does it right. Now "suddenly" everyone wants to copy.. uhm.. I mean "innovate" better than Apple.

Cue the iHaters to spin this as "but..but.. Apple didn't invent fingerprints".

Psychologically it's pretty amazing that so much in the consumer tech industry depends on whether Apple can work out all the kinks in the logistics. Sure, fingerprint scanners existed, touchscreens existed, notebooks existed, and on and on, but it's not until Apple figures out what parts are needed and what parts aren't need to make a product that is usable and fun does anything ever seem to change. I present two decades of Windows tablets are my first evidence for the jury.

Fandroids Sept 2013: Touch ID is such a useless gimmick! And besides, Apple wasn't first! Apple didn't invent fingerprinting! There were a few devices that had fingerprint sensors on them before! Nevermind that they were all bloody useless and did not work properly! I don't want the NSA owning my fingerprints! Apple users are such sheep, but one billion broke ass mofo's buying shitty Android phones are definitely not sheep!

Fandroids 2014: My new Samsung Galaxy 5 has this new ingenious feature, called Fingerprint ID! It is so damn cool! It may not work as well or as quickly as the Apple version yet, and it is not as secure, but that has already been taken care of, it'll be fixed in Kit Kat version number 4.5.001.78.2! Apple doesn't have a copyright on fingerprints! Damn iSheep!

Touchpad vendor Synaptics has announced plans to acquire Validity Sensors, a primary remaining fingerprint sensor vendor following Apple's acquisition of AuthenTec last year...

While there are a variety of companies that build fingerprint sensors, few companies have the expertise that AuthenTec had as the world's leading producer of the sensors and the identity management behind them, and most are inferior swipe scan systems or use simpler optical or thermal sensing.

IMO Apple users will benefit from faster 3rd party adoption of biometric authentication as a secure log-in and/or ID verification if a few million Android/Windows devices include Synaptic's (Validity) fingerprint touch sensors.

Psychologically it's pretty amazing that so much in the consumer tech industry depends on whether Apple can work out all the kinks in the logistics. Sure, fingerprint scanners existed, touchscreens existed, notebooks existed, and on and on, but it's not until Apple figures out what parts are needed and what parts aren't need to make a product that is usable and fun does anything ever seem to change. I present two decades of Windows tablets are my first evidence for the jury.

Not that surprising I think. there has always been very few companies that can really innovate in many fields. In the past that was Sony, Phillips, Braun. The others either copy or are in very narrow fields (logitech), or worse, one pony tricks like blackberry.

Disruptive innovation is rare, so what you get is usually either constant refinement of existing solutions (leica) that most companies on top of the art can do, or integration in novel ways. For the latter you need to master all components, not to be a simple integrator.

Microsoft was really the only one left that could have done it, but this is a company run by accountants and marketers, even the noun innovation is unknown to them.

Cars is perhaps the only field where there was many innovators, I think, and that is hardly true today.

Where would Sammy stick a sensor? I don't think there's enough room with the small non screen surface. Perhaps they will make an attachment or release the Samsung Galaxy S 5 Fingerprint as another model that's an inch longer to accommodate the sensor.

Where would Sammy stick a sensor? I don't think there's enough room with the small non screen surface. Perhaps they will make an attachment or release the Samsung Galaxy S 5 Fingerprint as another model that's an inch longer to accommodate the sensor.

There's always the back of the phone, like the great implementation used by the Motorola Atrix.

Second I had the Motorola phone with the finger print ID on it, I like the idea lots since it allows you the unlock the phone quickly especially while driving since you could not use voice command without the phone unlocked. With that said, it sucked, it did not work all the time, no rhyme of reason to why it worked some times and not others. I suspect that Android was too busy doing some sort of background task to realize I was tying to unlock the phone. Some time it took one quick swipe of your finger and you were set to go. Most time it would take multiply swipe and some time it just would refuse to recognize my finger.

This is the thing most people fail to understand, yeah others have created or use these new technologies and Finger print ID is again old, and most people have given up on it since it just does not work well or created other issues. Apple finds solutions to these problem and makes it work.

Certainly seems as though Samsung is proceeding smoothly in the latest drive by knock off.

"Originally, Samsung Electronics planned to adopt the fingerprint recognition function at the same time as the launch of the Galaxy Note 3. But as the US Validity Chip, the developer of the fingerprint recognition sensor, failed to pass the reliability test, this function was eliminated at the last minute."

This is the thing most people fail to understand, yeah others have created or use these new technologies and Finger print ID is again old, and most people have given up on it since it just does not work well or created other issues. Apple finds solutions to these problem and makes it work.

They saw the they needed to have more than just a fingerprint scanner but also add HW to their A7 chip, which may have required it to be 64-bit do to cryptographic additions to ARMv8 and the new ISA, in order to make this work the way they wanted. Who else can do this? Well, I guess Qualcomm can make this a part of their chip tech or perhaps it could be a separate chip on the MoBo.

IMO Apple users will benefit from faster 3rd party adoption of biometric authentication as a secure log-in and/or ID verification if a few million Android/Windows devices include Synaptic's (Validity) fingerprint touch sensors.

Validity makes pad sensors, as does whomever the supplier is behind the rumored new HTC One Max phone with one (although its apparently on the back of the phone). Whether they work the same remains to be seen, because they don’t currently ship.

Also, how exactly will "3rd party adoption of biometric authentication" occur when Apple expressly does not allow "3rd party adoption of biometric authentication"?

And how will Android and WP devices appearing with a Touch ID-like sensor do anything but highlight how much better Apple’s implementation is? If you’re imagining that some other company will better integrate fingerprint sensors than Apple, why haven’t any of the Android licensees also done a better job with touch screen latency, with processor performance and/or efficiency, with battery consumption and size, with RAM usage and/or efficiency, with multiple core support, with GPU performance and gaming exclusives, with interface lag, with wireless video distribution, with camera and/or flash, with gyro/motion sensor support, or really with any feature on Apple’s latest flagship?

I keep remembering how Android phones on Verizon had this massive ~2 year lead on very fast LTE data service, a feature of clear value and easy to demonstrate utility, and how as soon as iPhone 5 appeared Apple now sells the most LTE devices on Verizon... and worldwide. And even before the 5 shipped, Apple was still outselling all Android LTE phones combined with a CDMA 3G iPhone on Verizon, the world’s slowest 3G network-- against a variety of 4G LTE phones.

If you think some new feature will push Android or WP back into competition against the iPhone, ask yourself: is it more impressive and useful than the >10X improvement in data service LTE offered? If not, now it is going to move the needle?

And then remind yourself about how well Google’s implementation and rollout of NFC went. Or Adobe Flash. Or any other differentiating feature that was supposed to be better than iOS.

And as it has always been, the PC industry in general has zero clue how to use current tech and design appropriate software that hides the the from the user.

Then comes Apple (a.k.a. Samsung's R&D Department) to once again show how stupid everyone else is and does it right. Now "suddenly" everyone wants to copy.. uhm.. I mean "innovate" better than Apple.

Cue the iHaters to spin this as "but..but.. Apple didn't invent fingerprints".

They will argue that fingerprint sensors are prior art Apple can not patent it. There will usually be a one to two years lag before the copycats have TouchID like Android phones. Apple need to start writing the patent lawsuit papers now.

They saw the they needed to have more than just a fingerprint scanner but also add HW to their A7 chip, which may have required it to be 64-bit do to cryptographic additions to ARMv8 and the new ISA, in order to make this work the way they wanted. Who else can do this? Well, I guess Qualcomm can make this a part of their chip tech or perhaps it could be a separate chip on the MoBo.

Anand Lal Shimpi said in his review of the A7 that in tests he did the A7 is 825% faster than the iPhone 5 at AES encryption and 245% faster at sha1. The page can be found here.

He had this to say about the new cryptographic functions of the A7 and ARMv8:

Quote:

ARMv8 also adds some new cryptographic instructions for hardware acceleration of AES and SHA1/SHA256 algorithms. These hardware AES/SHA instructions have the potential for huge increases in performance, just like we saw with the introduction of AES-NI on Intel CPUs a few years back. Both the new advanced SIMD instructions and AES/SHA instructions are really designed to enable a new wave of iOS apps.

They will argue that fingerprint sensors are prior art Apple can not patent it. There will usually be a one to two years lag before the copycats have TouchID like Android phones. Apple need to start writing the patent lawsuit papers now.

I was under the impression that you cannot patent an idea... only an implementation of an idea.

So there can be lots of fingerprint scanners out there... but the method of scanning is what has to be unique.

Originally Posted by Corrections
And then remind yourself about how well Google’s implementation and rollout of NFC went. Or Adobe Flash. Or any other differentiating feature that was supposed to be better than iOS.

"Originally, Samsung Electronics planned to adopt the fingerprint recognition function at the same time as the launch of the Galaxy Note 3. But as the US Validity Chip, the developer of the fingerprint recognition sensor, failed to pass the reliability test, this function was eliminated at the last minute."

Scamsung has reliability tests??

fingerprint sensor failed while the rest of their products passed??

the "face sensor" "security" feature passed??It can be beaten by a potato!!

maybe the fingerprint sensor couldn't recognise a fingerprint and just unlocked when you touched it with whatever lol.

Fandroids Sept 2013: Touch ID is such a useless gimmick! And besides, Apple wasn't first! Apple didn't invent fingerprinting! There were a few devices that had fingerprint sensors on them before! Nevermind that they were all bloody useless and did not work properly! I don't want the NSA owning my fingerprints! Apple users are such sheep, but one billion broke ass mofo's buying shitty Android phones are definitely not sheep!

Fandroids 2014: My new Samsung Galaxy 5 has this new ingenious feature, called Fingerprint ID! It is so damn cool! It may not work as well or as quickly as the Apple version yet, and it is not as secure, but that has already been taken care of, it'll be fixed in Kit Kat version number 4.5.001.78.2! Apple doesn't have a copyright on fingerprints! Damn iSheep!

Huh, people are so paranoid.

When I looked up "Ninjas" in Thesaurus.com, it said "Ninja's can't be found" Well played Ninjas, well played.